SELinux: include definition of new capabilities